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Claims 

1 . 


2 . 


3. 

4. 


A method of authenticating a network user, comprising. 

a) perform ingVfrrst authentication step based on a first type of information; and 

b) performing at ftast a second authentication step based on a second type of 
information other than the first type of information. 

The method of claim 1, wherem step (a) comprises. 


i) 

ii) 

iii) 


obtaining the firs^type of information from the user, 


retrieving user identification information from a data source; 
comparing the first tyW of information supplied by the user with the 
user identification infomWion retrieved from the data source; and 
iv) determining a level of oWespondence between the first type of 
information supplied by the^us^Au/the user identification information 

retrieved from the data source. 

The method of claim 2, wherein the data source comprises a credit file of the user. 

The method of claim 1, wherein step (b) comprises: 

i) determining an availability of the second type of information for the 


ii) 

iii) 

iv) 


user; 

formulating at least one query based o^ available second type 
information for the user; 

presenting the at least one query to the user for re^onse; and 
evaluating the response. 
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The method\>f claim 4, wherein the identity of the user is authenticated based on the 
level of correspondence determined in step (a)(iv) and the evaluation made m step 

(b)(iv). 

The method of claiV 2, further comprising: 

c) determining, \ased at least in part on the level of correspondence determined 

in step (a)(iv), to: 

i) authenticate the user; 

ii) perform at legist the second authentication step; 

iii) request additional information from the user; or 

iv) take other action. 

The method of claim 6, wherein th^step (c) of determining is further based on a level 
of certainty of authentication desired. 

The method of claim 1, wherein a( l^s /Wtf^tep (a) and step (b) comprises 
generating an interactive query. 

The method of claim 8, wherein the interactive query comprises at least one question 

having multiple choice answers. 

The method of claim 1, wherein the first type o^nformation comprises wallet-type 
information and the second type of informati^i comprises non-wallet type 

information. 

The method of claim 1, wherein the second type of information comprises information 

pertaining to credit accounts to which the user is a party. 

The method of claim 11, wherein the second type of informatW comprises mortgage 
loan information, and the user is requested to identify at least on\of. 
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i) \ mortgage lender information; and 

ii) n\ortgage loan amount information. 

13. The method of cl^m 2, wherein the data source for the first type of information is 
used to identify the availability of the second type of information for the user. 

14. The method of claim \ further comprising (d) receiving biometric input from the 
user. 

1 5 . The method of claim 1 , whertein the network comprises the Internet. 

16. The method of claim 1, further comprising (e) logging a transaction record of the 
authentication. 

17. The method of claim 1 , further coiVprising (f) executing a pattern recognition process 
to detect potential irregularities in the\information supplied by the user. 

18. The method of claim 1, further compf^sing^g) performing an offline authentication 
based upon at least one of the first tjy^e yKf^hjfdnnation and the second type of 
information. 

19. The method of claim 18, wherein the step (gW performing an offline authentication 
comprises applying a mailability filter to tn^ at least one of the first type of 
information and the second type of information. 

20. A system for authenticating a network user, comprising: 
an input interface for receiving input from the user; anc 
a processor, connected to the input interface and configured to: 

perform a first authentication based on a first type otSinformation; and 
perform at least a second authentication based on a sedtond type of information 
other than the first type of information. 
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The syster^i of claim 20, wherein the first authentication performed by the processor 
comprises: 

obtaining the first type of information from the user; 
retrieving user identification information from a data source; 
comparing\the first type of information supplied by the user with the user 
identificationdnformation retrieved from the data source; and 
determining a level of correspondence between the first type of information 
supplied by the us^r and the user identification information retrieved from the 

data source. 

The system of claim 21 , whe)fein the data source comprises a credit file of the user. 

The system of claim 20, wherein the second authentication performed by the 

processor comprises: 

determining an availabilit( se^d type of information for the user; 

formulating at least one queryN^ased on available second type information for 

the user; 

presenting the at least one query to ^e user for response; and 

evaluating the response. 

The system of claim 23, wherein the identity oUe user is authenticated based on the 
level of correspondence determined in the detem^ning and the evaluating performed 
by the processor. 

The system of claim 21, wherein the processor determines, based at least m part on 
the level of correspondence, whether to: 


authenticate the user; 



lerform at least the second authentication; 
request additional information from the user; or 
take cither action. 

The system oXclaim 25, wherein the determining is further based on a level of 
certainty of authentication desired. 

The system of clairA20, wherein the processor generates an interactive query. 

The system of claim 2 V, wherein the interactive query comprises at least one question 
having multiple choice answers. 

The system of claim 20, ^herein the first type of information comprises wallet-type 
information and the second type of information comprises non-wallet type 
information. 

The system of claim 29, wh^reyi the second type of information comprises 
information pertaining to credit alcM^stovfidch the user is a party. 

The system of claim 30, wherein theVecond type of information comprises mortgage 
loan information, and the query comprises a request for the user to identify at least 

one of: 

mortgage lender information; and 
mortgage loan amount information. 

The system of claim 21, wherein the data source for the first type of information is 
used to identify the availability of the second typeVf information for the user. 

The system of claim 20, wherein the processor receives biometric input from the user. 
The system of claim 20, wherein the network comprised the Internet. 

The system of claim 20, wherein the processor logs V transaction record of the 


authentication. 
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36 . 


37. 


38. 


The system of claim W wherein the processor executes a pattern recognition process 
to detect potential irregu ladies in the information supplied by the user. 

The system of claim 20, wh^sein the processor performs an offline authentication 
based upon at least one of the forft tvde of information and the second type of 
information. 

The system of claim 37, wherein the offline authentication comprises applying a 
mailability filter to the at least one of the first typ*\° f information and the second type 


of information. 


